Network authentication of multiple profile accesses from a single remote device

摘要

A network authentication system and method is described for authenticating multiple profile accesses from a single remote device. A device remote from a web server, yet connected to the web server via, for example, the Internet, can allow multiple users to register their profiles within the device. The profiles are registered using a pre-existing user ID and password corresponding to, for example, the user's financial accounts. Multiple profiles and, specifically, the indicia of those profiles, can appear on the display of the remote device allowing each user the ability to select their own registered profile. Access to a profile is granted when the user enters their private PIN. Once the PIN is entered, the private information such as financial account information will be securely forwarded from the web server to the remote device.

主权项

1. A device configured for communication with a web server via a communication network, wherein the web server comprises a memory containing at least two user profiles and at least two tokens corresponding to the at least two user profiles, said device comprising:
a user interface configured to receive only personal identification numbers (PINs) from a user and, specifically, a first PIN and a second PIN, respectively associated with a first profile indicator and a second profile indicator displayed on a display communicatively coupled to the user interface; a communication unit operatively coupled to the communication network for receiving a first token corresponding to a first user profile and a second token corresponding to a second user profile from the web server via the communication network; an encryption unit operatively coupled to the communication unit for encrypting the first token using the first PIN and encrypting the second token using the second PIN; a second memory operatively coupled to the encryption unit for storing the first encrypted token and the second encrypted token; a hardware processor operatively coupled to the second memory for fetching the first encrypted token and the second encrypted token upon the user selecting the first profile indicator and the second profile indicator on the display, respectively, and the user interface receiving the first PIN and the second PIN, respectively; wherein said communication unit is configured for: sending to the web server via the communication network a first password generated from a combination of the first encrypted token and the first PIN and also for sending a second password generated from a combination of the second encrypted token and the second PIN; and receiving from the web server via the communication network the first user profile associated with the first password and the second user profile associated with the second password.